Extracted

• • Target

    SecuriteInfo.com.Linux.Siggen.9999.13676.18917.elf

  • Size

    45KB

  • MD5

    c84f29f2ab0d87cfea2a1a4251a8bea2

  • SHA1

    7afde7b9df77980acca2c40c6b66ab58e6c28c43

  • SHA256

    92191bb67c7de30dca8b11e062c204e9f43febce6207975f29e350a84628023d

  • SHA512

    f38ab551ece96190809ec70738a8534fc1526da54f5a30aa308902a17a018990a712550c3660cea6c9bf1f01d6e86dbf458af6509d5248b419ee3fb3c540f0a5

  • SSDEEP

    768:a0jrKT5w3HH/ifbJfkzt1v9tJJ5tp31zOAv9q3UELeNvu2M8CEv8JB505qTUbW/E:a0jrS5wP+N8Pv9tJtOAeLovu2M9Dn5sF

  Score

  10^/10

  mirailzrdbotnetdefense_evasiondiscovery

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1